"""Interface with the [LangChain Hub](https://smith.langchain.com/hub)."""

from __future__ import annotations

from collections.abc import Sequence
from typing import Any

from langchain_core._api.deprecation import deprecated
from langsmith import Client as LangSmithClient


@deprecated(
    since="1.0.6",
    removal="2.0.0",
    message=(
        "langchain_classic.hub.push is deprecated. Use the LangSmith SDK instead."
    ),
)
def push(
    repo_full_name: str,
    object: Any,  # noqa: A002
    *,
    api_url: str | None = None,
    api_key: str | None = None,
    parent_commit_hash: str = "latest",
    new_repo_is_public: bool = False,
    new_repo_description: str | None = None,
    readme: str | None = None,
    tags: Sequence[str] | None = None,
) -> str:
    """Push an object to the hub and returns the URL it can be viewed at in a browser.

    Args:
        repo_full_name: The full name of the prompt to push to in the format of
            `owner/prompt_name` or `prompt_name`.
        object: The LangChain object to serialize and push to the hub.
        api_url: The URL of the LangChain Hub API. Defaults to the hosted API service
            if you have an API key set, or a localhost instance if not.
        api_key: The API key to use to authenticate with the LangChain Hub API.
        parent_commit_hash: The commit hash of the parent commit to push to. Defaults
            to the latest commit automatically.
        new_repo_is_public: Whether the prompt should be public.
        new_repo_description: The description of the prompt.
        readme: README content for the repository.
        tags: Tags to associate with the prompt.

    Returns:
        URL where the pushed object can be viewed in a browser.
    """
    client = LangSmithClient(api_url, api_key=api_key)
    return client.push_prompt(
        repo_full_name,
        object=object,
        parent_commit_hash=parent_commit_hash,
        is_public=new_repo_is_public,
        description=new_repo_description,
        readme=readme,
        tags=tags,
    )


@deprecated(
    since="1.0.6",
    removal="2.0.0",
    message=(
        "langchain_classic.hub.pull is deprecated. Use the LangSmith SDK instead."
    ),
)
def pull(
    owner_repo_commit: str,
    *,
    include_model: bool | None = None,
    api_url: str | None = None,
    api_key: str | None = None,
) -> Any:
    """Pull an object from the hub and returns it as a LangChain object.

    !!! danger "Hub manifests are untrusted input"

        Treat every prompt pulled from the hub as untrusted, regardless of
        the owner. Public prompts authored by other users are obviously
        external content, but prompts from your own account — or your
        organization's account — are also unsafe if that account, a
        teammate's account, or the upstream prompt has been compromised.
        A single malicious commit to a prompt your code pulls is enough to
        execute attacker-controlled configuration on every machine that runs
        `pull()`.

        `pull()` deserializes the manifest via `load()`, so the
        `langchain_core.load.load` threat model applies — a manifest can
        intentionally configure a model with a custom base URL, headers,
        model name, or other constructor arguments. These are supported
        features, but they also mean the prompt contents are executable
        configuration rather than plain text: a compromised prompt can
        redirect API traffic, inject headers, or trigger arbitrary code paths
        in the classes it instantiates.

        Prefer the LangSmith SDK directly. If you must use `pull()`, pin the
        commit hash, audit the manifest before deserializing, and never run
        it against an account whose access controls you cannot vouch for.

    Args:
        owner_repo_commit: The full name of the prompt to pull from in the format of
            `owner/prompt_name:commit_hash` or `owner/prompt_name`
            or just `prompt_name` if it's your own prompt.
        include_model: Whether to include the model configuration in the pulled
            prompt. When `True`, the model declared by the prompt is also
            deserialized.
        api_url: The URL of the LangChain Hub API. Defaults to the hosted API service
            if you have an API key set, or a localhost instance if not.
        api_key: The API key to use to authenticate with the LangChain Hub API.

    Returns:
        The pulled LangChain object.
    """
    client = LangSmithClient(api_url, api_key=api_key)
    return client.pull_prompt(owner_repo_commit, include_model=include_model)